PT-2026-33443 · Dell · Dell Powerprotect Data Domain+1

Published 2026-04-14 · Updated 2026-05-08 · CVE-2025-46606

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions 8.4 through 8.5

Description An improper restriction of excessive authentication attempts allows a high privileged attacker with remote access to potentially gain unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2026-06530

CVE-2025-46606

Affected Products

Ddos

Dell Powerprotect Data Domain

References · 5

• https://bdu.fstec.ru/vul/2026-06530 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46606 · Security Note
• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://t.me/cveNotify/162704 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2045163310438309973 · Twitter Post